https://pjqkh.ytimewornan.xyz

Status: finished

Submission Time: 2021-10-14 08:50:00 +02:00

Suspicious

Trojan

Comments

Details

Analysis ID:
502673
API (Web) ID:
870245
Analysis Started:

2021-10-14 08:50:01 +02:00
Analysis Finished:

2021-10-14 08:56:27 +02:00
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	suspicious Score: 20	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP	Country	Detection
44.195.137.121	United States
13.224.193.92	United States
44.198.9.0	United States
Click to see the 6 hidden entries
216.58.215.225	United States
142.250.203.110	United States
172.217.168.45	United States
173.194.69.188	United States
239.255.255.250	Reserved
44.196.246.79	United States

Domains

Name	IP	Detection
dweatherbe.xyz	44.195.137.121
kuwaiting.xyz	13.224.193.92
pjqkh.ytimewornan.xyz	0.0.0.0
Click to see the 9 hidden entries
android.l.google.com	142.250.203.110
hotlightexpens.fun	44.196.246.79
accounts.google.com	172.217.168.45
clients.l.google.com	172.217.168.78
mobile-gtalk.l.google.com	173.194.69.188
googlehosted.l.googleusercontent.com	216.58.215.225
encythan.online	44.198.9.0
clients2.googleusercontent.com	0.0.0.0
clients2.google.com	0.0.0.0

URLs

Name	Detection
https://pjqkh.ytimewornan.xyz/
https://www.google.com/intl/en-US/chrome/blank.html
https://hangouts.google.com/
Click to see the 60 hidden entries
https://www.google.com;
https://payments.google.com/payments/v4/js/integrator.js
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
https://pjqkh.ytimewornan.xyz/service_worker.js?b1BJUEI0cnBhclpmfHJuTXJlciBaMn9jJldjZDUhDGlkZCMKaWQx
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
https://support.google.com/chromecast/troubleshooter/2995236
https://ogs.google.com
https://www.google.com/images/x2.gif
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
https://dns.google
http://www.apache.org/licenses/LICENSE-2.0
https://pjqkh.ytimewornan.xyz/#CC89067E-3743-4FDD-9EF0-17F518D25-V2
https://pjqkh.ytimewornan.xyz/service_worker.js
https://www.google.com/tools/feedback
https://clients2.google.com
https://www.google.com/images/dot2.gif
https://meetings.clients6.google.com
https://play.google.com/log?format=json&hasfast=true
http://tools.ietf.org/html/rfc1950
https://encythan.online/WFhHWkojejQtFS0qK3hwejAzLjorYmh1OjIpLDJkISwuNy8vNzU0KzZ2PyMwdysiKDwxOyIFPTcqLD84djI0eGZ6Kyo8aGJpa3g5NS5lYGhrdnN4ZnosJj0VMTxlYGhhaXdvfG16a3g5LToYMy5qen14KG06cWkuYGtqPyk7YWpuKz1hajssPGxqPC9ha3Ztcjo7f299eiU
https://kuwaiting.xyz/utx?tid=910565&top=pjqkh.ytimewornan.xyz&cb=22eiRgQjEUG4
https://support.google.com/chromecast/answer/2998456
https://dweatherbe.xyz/
https://clients2.googleusercontent.com
https://docs.google.com
https://www.google.com/
https://feedback.googleusercontent.com
https://clients2.google.com/service/update2/crx
https://clients6.google.com
https://www.google.com
https://pjqkh.ytimewornan.xyz/service_worker.js?b1BJUEI0cnBhclpmfHJuTXJlciBaMn9jJldjZDUhDGlkZCMKaWQxJAtkZDYnVmN4Z3oNM3FldU18a2chCzMsZiQJfShodgl9fWJ1DX0raSZdfX4zdQtpeGh3XmVwMWBDcjonYENyLScnDiQhNTANNWcoOxVyZXJzX358cm4JMSUjJ0M2KDwxCnwvMS4cNRQ
https://pjqkh.ytimewornan.xyz/Title/
https://apis.google.com/js/client.js
https://www.google.com/images/cleardot.gif
https://encythan.online/WFhHWkojejQtFS0qK3hwejAzLjorYmh1OjIpLDJkISwuNy8vNzU0KzZ2PyMwdysiKDwxOyIFPTcq
https://play.google.com
https://crash.corp.google.com/samples?reportid=&q=
https://www.google.com/log?format=json&hasfast=true
https://pjqkh.ytimewornan.xyz/0
https://pjqkh.ytimewornan.xyz/2
https://sandbox.google.com/payments/v4/js/integrator.js
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
https://accounts.google.com/MergeSession
https://preprod-hangouts-googleapis.sandbox.google.com
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
https://pjqkh.ytimewornan.xyz/Title
https://pjqkh.ytimewornan.xyz/
https://hangouts.clients6.google.com
https://meet.google.com
https://hangouts.google.com/hangouts/_/logpref
https://accounts.google.com
https://clients2.google.com/cr/report
https://pjqkh.ytimewornan.xyz
http://angularjs.org
https://creativecommons.org/publicdomain/zero/1.0/.
https://github.com/angular/material
https://apis.google.com
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
https://github.com/madler/zlib/blob/master/zlib.h
https://www-googleapis-staging.sandbox.google.com

Dropped files

Name	File Type	Hashes
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG	ASCII text	#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index	ISO-8859 text, with no line terminators, with escape sequences	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\MANIFEST-000001	PGP\011Secret Key -	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000001.dbtmp	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.t (copy)	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencesa (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesH. (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesAE (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.oldP (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateMP (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\8da93ffa-3c3f-4107-9b7b-a3d5ba8abef8.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old8d (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old.c (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent StateMP (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateK (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\cb906797-f9ed-4538-8efd-42f0e2df3f49.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.olde/ (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent StateMP (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old. (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old\. (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldld (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8430c2e1-ed8e-45a3-94e9-b21ed5ca1f9c.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\71b77b8f-f0b0-42ef-802d-5f0d329c470c.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1db26ed2-2a22-4139-8e9b-4cc3551884fa.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\171152fa-921b-4f4a-8f15-c751ef5dbe65.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabsnd (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session.i (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_pjqkh.ytimewornan.xyz_0.indexeddb.leveldb\MANIFEST-000001	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_pjqkh.ytimewornan.xyz_0.indexeddb.leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_pjqkh.ytimewornan.xyz_0.indexeddb.leveldb\CURRENT (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_pjqkh.ytimewornan.xyz_0.indexeddb.leveldb\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_pjqkh.ytimewornan.xyz_0.indexeddb.leveldb\000001.dbtmp	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\334e3b54-21b5-43be-b646-d7452363df97.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001	PGP\011Secret Key -	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldtm (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENTde (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\000001.dbtmp	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.oldl (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG	ASCII text	#

https://pjqkh.ytimewornan.xyz

Comments

Tags

Available tags:

Details

Joe Sandbox

IPs

Domains

URLs

Dropped files

https://pjqkh.ytimewornan.xyz Options

Comments

Tags

Available tags:

Details

Joe Sandbox

IPs

Domains

URLs

Dropped files

Search started

https://pjqkh.ytimewornan.xyz